Privacy policy
Last updated: 4 October 2026
1. Who we are
The data controller is MK Premium Rent a Car SRL, Calea Floreasca 169, București ("Monte Rent"). For any question about your data, write to rezervari@monterent.ro.
2. What data we collect
Data you give us: first and last name, email, phone, date of birth, driving licence series and number, ID details required for the contract, flight number and booking notes.
Account data: if you sign up with Google or Facebook, they send us your name and email address (we never receive your password and never post on your behalf).
Newsletter: your email address, site language and where you subscribed.
Technical data: IP address, browser and device type and, only with your consent, analytics and marketing cookies (see Cookies).
3. Why we use it and on what legal basis
Bookings, contracts, handover and return, invoicing — performance of a contract (Art. 6(1)(b) GDPR) and legal tax obligations (Art. 6(1)(c)).
Customer account and Google/Facebook sign-in — providing the service you ask for (Art. 6(1)(b)).
Newsletter and commercial offers — only with your consent (Art. 6(1)(a)); unsubscribe at any time.
Statistics and ad campaign measurement — only with your consent given in the cookie banner (Art. 6(1)(a) GDPR and Romanian Law 506/2004).
Security and fraud prevention — our legitimate interest (Art. 6(1)(f)).
5. Server-side conversion measurement
When you send a booking or contact form or subscribe, our server may also send the event directly to our advertising partners, for accurate campaign measurement:
If you accepted marketing cookies: Meta, TikTok and OpenAI receive the event type, booking value, your email, phone and name in pseudonymised form (SHA-256 hash, irreversible), IP address, browser and their cookie identifiers, and use them to attribute the conversion to an ad.
If you did not: Google Analytics receives an anonymous event only (no cookies, no personal data, no IP), used to count conversions. Nothing else is sent.
6. Who we share data with
We don't sell your data. We only share it with: our hosting and database providers (Vercel Inc., Prisma Data Inc. — EU servers), our email provider, payment processors, insurers, the advertising partners above (with your consent only) and public authorities when the law requires it.
Some providers (Google, Meta, TikTok, OpenAI, Vercel) may transfer data outside the EU, to the US, under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
7. How long we keep data
Booking data and contracts: for the contractual relationship, then 10 years for accounting records (Romanian Accounting Law 82/1991).
Customer account: until you delete it or ask us to. Newsletter: until you unsubscribe. Cookie consent records: 3 years.
8. Your rights
You have the right of access, rectification, erasure, restriction, portability, to object and to withdraw your consent at any time without affecting earlier processing. Write to rezervari@monterent.ro; we reply within 30 days.
You can lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.